Ask HN: Best practices to harden your personal-finance security posture?

Paging security people! A few weeks ago, there was some discussion here [0] about using separate banks and debit/ATM cards for on and offline use, using 2FA, and other things. Several good ideas came up, but getting at them required a deep-dive through the comments.

In this age of vast data breaches, it would be nice to get a canonical list of best practices, all in one place, for defense against fraud, identity theft, etc. Perhaps this might vary as a function of geography, and the variations could be interesting, too.

[0] https://news.ycombinator.com/item?id=7847606